CVE-2007-3703

CVE-2007-3703 and CVE-2007-3984 pertain to buffer overflow vulnerabilities in the Zenturi ProgramChecker sasatl.dll 1.5.0.531 ActiveX controls. CVE-2007-3703 (Fill method) and CVE-2007-3984 (Scan method) are described as stack-based or buffer overflow flaws that could allow remote code execution ...

CVE-2007-3703

Stack-based buffer overflow in a certain ActiveX control in sasatl.dll 1.5.0.531 in Zenturi Program Checker ProgramChecker Pro allows remote attackers to execute arbitrary code via a long argument to the Fill method. NOTE: this is probably a different issue than CVE-2007-2987...

Code injection

Eltima Software Virtual Serial Port VSPAX ActiveX control VSPort.DLL allows remote attackers to cause a denial of service via certain function calls, as demonstrated via the 1 Attach, 2 Write, and 3 WriteStr functions...

CVE-2007-3661

Eltima Software Virtual Serial Port VSPAX ActiveX control VSPort.DLL allows remote attackers to cause a denial of service via certain function calls, as demonstrated via the 1 Attach, 2 Write, and 3 WriteStr functions...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Innovasys DockStudioXP InnovaDSXP2.OCX ActiveX Control have unspecified attack vectors and impact, including a denial of service via "improper use" of the SaveToFile function...

CVE-2007-3664

Multiple unspecified vulnerabilities in Eltima Software RunService ActiveX control RunService.dll allow remote attackers to cause a denial of service via certain functions when "improperly used", as demonstrated by the AcceptControls subroutine...

CVE-2007-3669

Multiple unspecified vulnerabilities in the Innovasys DockStudioXP InnovaDSXP2.OCX ActiveX Control have unspecified attack vectors and impact, including a denial of service via "improper use" of the SaveToFile function...

CVE-2007-3660

The Nonnoi ASP/Barcode ActiveX control nonnoiASPBarcode.dll allows remote attackers to overwrite arbitrary files via an argument to the SaveBarcode function...

CVE-2007-3661

Eltima Software Virtual Serial Port VSPAX ActiveX control VSPort.DLL allows remote attackers to cause a denial of service via certain function calls, as demonstrated via the 1 Attach, 2 Write, and 3 WriteStr functions...

CVE-2007-3669

Multiple unspecified vulnerabilities in the Innovasys DockStudioXP InnovaDSXP2.OCX ActiveX Control have unspecified attack vectors and impact, including a denial of service via "improper use" of the SaveToFile function...

CVE-2007-3669

Technical details about CVE-2007-3669 are not publicly available in the provided documents. No concrete information on affected products, vulnerable components, impact, or remediation is present; monitor for updates.

CVE-2007-3649

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

CVE-2007-3649

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

CVE-2007-3649

The CVE-2007-3649 issue affects HP Digital Imaging’s hpqvwocx.dll 2.1.0.556 (ActiveX control). The vulnerability is an absolute path traversal in the SaveToFile method’s second argument, allowing remote attackers to create or overwrite arbitrary files. The provided sources confirm the affected co...

CVE-2007-3633

Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 SaveLastError method and probably the 2 WriteExe method...

CVE-2007-3633

Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the 1 SaveLastError method and probably the 2 WriteExe method...

neotracepro-overflow.txt

Date: 24/03/07 México / PRIVATE DON'T DISTRIBUTE PRIVATE DON'T DISTRIBUTE PRIVATE / I found this buffer overflow fuzzing NeoTraceExplorer.dll an ActiveX Control with ComRaider from iDefense. It has a method called TraceTarget which can be exploited passing a large string 486 bytes due there's no...

CVE-2007-3633

CVE-2007-3633 concerns an absolute path traversal in the ChilkatZip2.dll 12.4.2.0 Chilkat Zip ActiveX control. The vulnerability arises from passing a full pathname to the SaveLastError or possibly the WriteExe method, enabling remote attackers to create or overwrite arbitrary files. Affected com...

McAfee Visual Trace ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the McAfee Visual Trace 3.25 ActiveX Control NeoTraceExplorer.dll 1.0.0.1. By sending an overly long string to the "TraceTarget" method, an attacker may be able to execute arbitrary code. This module requires Metasploit:...